$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft File: 09F7B3237C248B53A3ADBB771E63C783610963AB.mft (raw, json) Hash identifier: 2c/KdLTr/1i2A3Ov1DOtPHtLcPyTXWMuT2RbszrY0Ak= Subject key identifier: 28:AC:40:42:E4:17:23:F9:ED:DE:E6:93:33:CC:57:EF:66:50:32:E5 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 305CB6331F0724A15A7E29D9338344B27B75BCE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft Manifest number: D6 Signing time: Sat 13 Jun 2026 15:51:54 +0000 Manifest this update: Sat 13 Jun 2026 15:46:54 +0000 Manifest next update: Sun 14 Jun 2026 18:06:54 +0000 Files and hashes: 1: 3130332e3139372e3138302e302f32322d3234203d3e20313532303932.roa (hash: B6x/uDECE7+Fg5u7tyvLoqu43JaKthAEheYeLJj7NRQ=) 2: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (hash: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w=) 3: 09F7B3237C248B53A3ADBB771E63C783610963AB.crl (hash: uDwZu2jDZVdZU72F5E8v0v6xRpU9x7KQvWQ+VxINPMg=) 4: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (hash: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5c:b6:33:1f:07:24:a1:5a:7e:29:d9:33:83:44:b2:7b:75:bc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Jun 13 15:46:54 2026 GMT Not After : Jun 14 18:06:54 2026 GMT Subject: CN=28AC4042E41723F9EDDEE69333CC57EF665032E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:ec:e3:ed:e9:83:1a:e5:3d:50:22:e0:92: a4:7a:53:c7:2c:0e:25:12:b7:21:a3:09:bc:bb:bd: e8:ee:3b:32:b6:9b:5f:44:12:fe:d2:a1:8c:86:61: a5:2c:04:07:8a:42:8a:0c:f3:f8:9e:9a:54:28:08: ed:b9:b3:a4:80:7a:55:42:27:63:a1:d0:29:b9:11: 53:26:72:84:e1:3a:1a:80:89:32:d1:28:7c:93:f7: 6c:1e:b0:4e:2d:da:d5:b3:f8:2e:87:48:88:bc:0f: 93:6e:80:bf:c6:29:cc:7a:24:37:e5:c2:03:8c:9b: ac:53:b2:67:fd:27:e9:c2:73:9e:af:c5:57:7e:04: fa:c1:8d:e0:e3:44:b2:cc:4b:08:a4:eb:68:aa:6e: c1:42:99:5e:fc:a2:b7:3f:13:7d:47:46:44:70:bc: ba:78:2e:76:27:de:4f:53:36:7f:ca:ff:b9:1e:59: 82:75:c2:14:2a:ac:40:c9:1a:74:e2:a4:92:94:64: 8b:e6:de:d6:19:45:4c:70:06:a9:72:d6:8f:f3:e8: 3d:00:ad:8f:1c:54:54:27:94:45:ba:30:a2:10:ac: af:1f:ca:7d:f4:a1:9a:c4:65:33:e4:36:b8:c6:8a: 50:4b:a5:73:ea:ed:97:28:dc:d8:03:4c:b4:2e:27: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AC:40:42:E4:17:23:F9:ED:DE:E6:93:33:CC:57:EF:66:50:32:E5 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d8:5d:84:c1:66:83:4d:ad:d6:15:80:c1:3a:b4:6f:58:9c: 06:5d:ce:d9:fe:8d:b1:f2:c2:48:2c:8f:bf:8d:58:cc:21:76: 0b:16:d9:e0:eb:4b:48:c4:a7:a0:a0:79:94:5b:a3:cb:cc:ba: 01:dd:f0:d0:c2:8b:73:6d:5b:db:b7:7b:d5:bb:4b:01:2f:af: ac:5d:4b:83:16:83:87:4f:36:19:5f:86:30:76:0b:61:60:be: 6c:3d:b7:d9:3a:ae:30:50:c4:fb:1c:e1:69:3c:d7:ba:1a:6f: 07:b2:4d:10:77:bd:9d:bd:1a:6d:9e:8e:8f:49:9b:5e:72:18: 89:e1:d0:38:8d:3e:83:d5:d7:b9:86:0f:77:30:6f:42:83:07: e2:67:54:6e:66:7c:f7:c7:45:8d:96:6e:6e:9e:85:fd:d5:76: 31:be:da:cf:88:67:64:44:cd:9b:56:ed:e5:ce:ce:9e:de:61: a0:71:e2:cd:6a:34:f1:90:14:0e:d0:90:d9:20:54:96:ed:9f: d5:7a:d3:19:47:49:59:2f:22:5e:d4:7c:e3:c2:81:61:eb:d0: a1:a0:bf:10:90:36:6f:f9:bc:f0:30:33:ea:2b:8b:13:08:ce: 0a:a1:b9:ad:4e:e0:a2:cf:11:ff:9b:a0:26:a9:cd:39:cb:4d: c5:56:51:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMFy2Mx8HJKFafinZM4NEsnt1vOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA2MTMxNTQ2NTRaFw0yNjA2MTQxODA2NTRaMDMxMTAvBgNV BAMTKDI4QUM0MDQyRTQxNzIzRjlFRERFRTY5MzMzQ0M1N0VGNjY1MDMyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Wuzj7emDGuU9UCLgkqR6U8cs DiUStyGjCby7vejuOzK2m19EEv7SoYyGYaUsBAeKQooM8/iemlQoCO25s6SAelVC J2Oh0Cm5EVMmcoThOhqAiTLRKHyT92wesE4t2tWz+C6HSIi8D5NugL/GKcx6JDfl wgOMm6xTsmf9J+nCc56vxVd+BPrBjeDjRLLMSwik62iqbsFCmV78orc/E31HRkRw vLp4LnYn3k9TNn/K/7keWYJ1whQqrEDJGnTipJKUZIvm3tYZRUxwBqly1o/z6D0A rY8cVFQnlEW6MKIQrK8fyn30oZrEZTPkNrjGilBLpXPq7Zco3NgDTLQuJ8m3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKKxAQuQXI/nt3uaTM8xX72ZQMuUwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8wOUY3QjMyMzdDMjQ4 QjUzQTNBREJCNzcxRTYzQzc4MzYxMDk2M0FCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdhdhMFmg02t 1hWAwTq0b1icBl3O2f6NsfLCSCyPv41YzCF2CxbZ4OtLSMSnoKB5lFujy8y6Ad3w 0MKLc21b27d71btLAS+vrF1LgxaDh082GV+GMHYLYWC+bD232TquMFDE+xzhaTzX uhpvB7JNEHe9nb0abZ6Oj0mbXnIYieHQOI0+g9XXuYYPdzBvQoMH4mdUbmZ898dF jZZubp6F/dV2Mb7az4hnZETNm1bt5c7Ont5hoHHizWo08ZAUDtCQ2SBUlu2f1XrT GUdJWS8iXtR848KBYevQoaC/EJA2b/m88DAz6iuLEwjOCqG5rU7gos8R/5ugJqnN OctNxVZRdw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:56 2026 by rpki-client